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IN THE CLAIMS 

Pursuant to 37 CFR §§1.113,1.114, please amend the claims as shown below. This 
Listing of the Claims replaces all previous versions and listings thereof. 



method comprising the steps of: 

registering with a database server a user defined policy function supph e d by a user to 

associate with at least two columns of two tables : 
wherein registering causes said database server to generate database metadata that associates said 

policv function with said at least two columns in at least two tables: 
based on the metadata, said database server detecting that a querv references said database 

command r e quires acc e ss to columns in at least two columns tabl e s ; and 
in response to the step of detecting: 

said database server invoking ef said policy function to generate a condition expression 
retumed by the policy function; and 

rewriting said querv databas e command by creating a modified querv databas e command 
to incorporate said condition expression, based on the database querv command . 

2-3. (Cancelled) 

4. (Previously Presented) The method of claim 1, wherein the policy function is not invoked by 
detecting that a database command requires access to a subset of tables of the at least two tables, 
wherein the subset of tables includes at least one table. 

5-6. (Cancelled) 

7. (Previously Presented) The method of claim 1 , wherein the detecting includes detecting that 
metadata defines the colmnns as a combination of columns to which access is controlled. 

8. (Previously Presented) The method of claim 1, further comprising the step of registering a 
policy function with a policy. 



1 . (Currently Amended) 



A machine-implemented method for managing access to data, the 
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9. (Previously Presented) The method of claim 8, wherein the policy includes metadata 
identifying the columns. 

10. (Currently Amended) A machine-readable medium carrying one or more sequences of 
instructions, which when executed by one or more processors, causes the one or more processors to 
perform a method comprising the steps of: 

registering with a database server a user defined policy function suppli e d by a usor to associate 

with at least two columns of two tables : 
wherein registering causes said database server to generate database metadata that associates said 

policv function with said at least two columns in at least two tables: 
based on the metadata, said database server detecting that a query references database command 

r e quir e s acc e ss to columns in at least two columns tables ; and 
in response to the step of detecting: 

said database server invoking ef said policy to a generate of a condition expression retumed 
by the poUcy function; and 

rewriting said query databas e command by creating a modified query databoso command 
to incorporate said condition expression, based on the database query command . 

11-12. (Cancelled) 

13. (Previously Presented) The machine readable medium of claim 10, wherein the poUcy 
function is not invoked by detecting that a database command requires access to a subset of tables 
of the at least two tables, wherein the subset of tables includes at least one table. 

14-15. (Cancelled) 

16. (Previously Presented) The machine readable medium of claim 10, wherein the detecting 
includes detecting that metadata defines the columns as a combination of columns to which access 
is controlled. 
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17. (Previously Presented) The machine readable medium of claim 10, wherein the method 
further comprises the step of registering a poHcy function with a poHcy. 



18. (Previously Presented) The machine readable medium of claim 17, wherein the poUcy 
includes metadata identifying the columns. 
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